General
- Target 2026-08-24_01ccafd1e36cc5593ec54e345a599e33_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys
- Size 596KB
- Sample260825-y5jdfavya1
- SHA256 e776e84a1c2febcadfe15906b10b450557325db5a03d6686f25cf6f2b4d7408a
- MD5 01ccafd1e36cc5593ec54e345a599e33
- SHA1 2be6fccfb9f9ce54dda6a280d3e637f16d6b2176
- SHA512 cd1f2a602fbafe0e62feef13ed86a0f3c05315b1851655940c89e0b4339399ba4d745ebec493e10dbef976ea79fb13aacb801f3d4835fd6cda7c5a7fd408a517
- SSDEEP 12288:GaoVmI4YWE+66uTHJ/J+kvvcLIb1M/Bo1lBISiuWXp:GDVmIywxx+1L6goLGSiuWXp
- TLSH T122D46C0176D0CF31E1AF0536996A9BB45A7FBC208F2887CB63947E19BE306C19A35717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_01ccafd1e36cc5593ec54e345a599e33_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_01ccafd1e36cc5593ec54e345a599e33_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_01ccafd1e36cc5593ec54e345a599e33_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys
- Size 596KB
- SHA256 e776e84a1c2febcadfe15906b10b450557325db5a03d6686f25cf6f2b4d7408a
- MD5 01ccafd1e36cc5593ec54e345a599e33
- SHA1 2be6fccfb9f9ce54dda6a280d3e637f16d6b2176
- SHA512 cd1f2a602fbafe0e62feef13ed86a0f3c05315b1851655940c89e0b4339399ba4d745ebec493e10dbef976ea79fb13aacb801f3d4835fd6cda7c5a7fd408a517
- SSDEEP 12288:GaoVmI4YWE+66uTHJ/J+kvvcLIb1M/Bo1lBISiuWXp:GDVmIywxx+1L6goLGSiuWXp
- TLSH T122D46C0176D0CF31E1AF0536996A9BB45A7FBC208F2887CB63947E19BE306C19A35717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory